II. AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows: 

1 . (Currently Amended) Method for accessing Internet resources provided by a content 
server in a data transmission system including an HTTP proxy connected to the Internet 
network, said HTTP proxy being adapted to perform form-based authentication of a user 
when receiving a user request for Internet resources therefrom, and wherein said proxy 
transmits the user request to said content server which sends back a response to the 
proxy; said method comprising: 

receiving a user request from a user for Internet resources at an HTTP proxy; 

transmission from said proxy to a Single Sign On (SSO) server of said user 
request together with credentials associated with said user, wherein said SSO server is 
external to and accessible via the Internet to said HTTP proxy, 

obtaining by the SSO server a login form from the content server, wherein said 
SSO server has at its disposal a configuration file for obtaining and filling said login 
form, said configuration file providing information about said content server, 

filling by said SSO server of the login form obtained from said content server, 
said login form being filled by the SSO server using said credentials, 

transmission from the SSO server to the content server of the filled login form, 

transmission by said content server to said SSO server of an HTTP response to 
said user request after the content server receives the filled login form from said SSO 
serve r, wherein any session cookie augmenting the HTTP response is opaque to the 
SSO server and the HTTP proxy allowing the content server to verify proper 
identification of the user upon a subsequent request , 

sending of the HTTP response back to the HTTP proxy by the SSO server and, 

transmission by said HTTP proxy of the requested information to said user, said 
information being contained in said HTTP response, 

wherein subsequent user requests are forwarded directly from the HTTP proxy to the 
content server, and HTTP responses to the subsequent user requests are transmitted 
directly to the proxy by the content server, without going through the SSO server. 
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2. (Cancelled). 



3. (Currently Amended) Method according to claim [[2]] 1, wherein the configuration file 
includes information including at least one of an URL of a login page, a location of said 
login page, a name of an input field used for a username and a name of an input field 
used for a password. 

4. (Currently Amended) Method according to claim [[2]] 1_, wherein said HTTP response 
from said content server sent back to said HTTP proxy includes at least one cookie 
specific to said content server. 

5. (Previously Presented) Method according to claim 1, further comprising an initial step 
of transmitting by said user a first request to said HTTP proxy invoking an external URL 
configured in said HTTP proxy, said HTTP proxy sending back an authentication 
challenge to said user in order to verify the user credentials and checking whether the 
user credentials correspond to a valid user. 

6. (Cancelled). 
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7. (Currently Amended) Data transmission system including a HTTP proxy connected to 
the Internet network and a content server to which a user can gain access through 
said HTTP proxy, said HTTP proxy being associated with authentication means 
adapted to perform form-based authentication of the user when receiving a user 
request for Internet resources therefrom and wherein said HTTP proxy transmits the 
user request to said content server which sends back a HTTP response to said 
HTTP proxy; said authentication means comprising: 

a Single Sign-On (SSO) server adapted to receive from the HTTP proxy a user 
request and credentials associated with the user, to obtain a login form from said 
content server when receiving said user request from said HTTP proxy, to fill in said 
login form using the credentials associated with said user, and to send back the filled 
login form to said content server, so that said content server can provide the requested 
information to the HTTP proxy after authentication of said user, wherein said SSO 
server has at its disposal a configuration file for obtaining and filling said login form, said 
configuration file providing information about said content server such as the URL of the 
login page, wherein said SSO server is external to and accessible via the Internet to 
said HTTP proxy, 

wherein subsequent user requests are forwarded directly from the HTTP proxy to 
the content server, and HTTP responses to the subsequent user requests are 
transmitted directly to the HTTP proxy by the content server, without going through the 
SSO serve r, wherein any session cookie augmenting the HTTP response is opaque to 
the SSO server and the HTTP proxy allowing the content server to verify proper 
identification of the user upon a subsequent request . 

8. (Cancelled). 

9. (Currently Amended) Data transmission system according to claim [[8]] 7, wherein the 
configuration file includes information including at least one of an URL of a login page, a 
location of said login page, a name of an input field used for a username and a name of 
an input field used for a password. 
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10. - 1 1 . (Cancelled). 
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